Announcement

Collapse
No announcement yet.

Exch 2010: Dumb, Stupid and Typical Microsoft Error...

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Exch 2010: Dumb, Stupid and Typical Microsoft Error...

    This is why I hate Microsoft so much lately. The Domain Administrator account does not have permissions to enter the serial number for Exchange 2010 in the Exchange Management Console or Exchange Management Shell. Shell results below, error in boldface (edited for obvious reasons).

    [PS] C:\Windows\system32>Set-ExchangeServer -Identity server -ProductKey XXXXX-XXXXX-XXXXX-XXXXX-XXXXX

    Active Directory operation failed on server.domain.local. This error is not retriable. Additional information Insufficient access rights to perform the operation.
    Active directory response: 00002098: SecErr: DSID-03150A48, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
    + CategoryInfo : NotSpecified: (0:Int32) [Set-ExchangeServer], ADOperationException
    + FullyQualifiedErrorId : 6E0901B0,Microsoft.Exchange.Management.SystemConfi gurationTasks.SetExchangeServer


    <sarcasm>It appears I have appropriate security rights to format the server RAID arrays, change the AD forest, DNS and networking settings then actually install Exchange 2010 itself but the system security balks at me entering the Exchange 2010 serial number because it might be dangerous... </sarcasm>

    You have no idea how close I came to deleting the whole install and going with SendMail when I saw that error. Give me a few minutes to calm down then please suggest what to do to get around this.

    Shad

  • #2
    Re: Exch 2010: Dumb, Stupid and Typical Microsoft Error...

    Can you disable inheritance on the Administrator object in AD and then try?
    Technical Director
    www.tecguruz.com
    Ex-Microsoft (Exchange Client & Server Infrastructure Team), MCSA, MCSE, MCITP, MCTS & ITIL Foundation certified

    Comment


    • #3
      Re: Exch 2010: Dumb, Stupid and Typical Microsoft Error...

      Is the Administrator a member of the Exchange Organisation Management role?
      Tom Jones
      MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
      PhD, MSc, FIAP, MIITT
      IT Trainer / Consultant
      Ossian Ltd
      Scotland

      ** Remember to give credit where credit is due and leave reputation points where appropriate **

      Comment


      • #4
        Re: Exch 2010: Dumb, Stupid and Typical Microsoft Error...

        are you logged on using a domain adminstrator account, or a local administrator ?
        Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

        Comment


        • #5
          Re: Exch 2010: Dumb, Stupid and Typical Microsoft Error...

          Ensure that you are running the command from an elevated EMS, or just use the GUI in EMC.

          Simon.
          --
          Simon Butler
          Exchange MVP

          Blog: http://blog.sembee.co.uk/
          More Exchange Content: http://exchange.sembee.info/
          Exchange Resources List: http://exbpa.com/
          In the UK? Hire me: http://www.sembee.co.uk/

          Sembee is a registered trademark, used here with permission.

          Comment


          • #6
            Re: Exch 2010: Dumb, Stupid and Typical Microsoft Error...

            Originally posted by Sembee View Post
            Ensure that you are running the command from an elevated EMS, or just use the GUI in EMC.
            Good Morning,

            I used both and got the same error. To answer the other questions, I am using a Domain Admin account and I have added that account to the Exchange Organization Management role.

            It looks like a uninstall and re-install is in the future as this does not appear to be a simple thing to fix.

            Will let you know what happens.

            Comment


            • #7
              Re: Exch 2010: Dumb, Stupid and Typical Microsoft Error...

              How about creating a new account, adding it to the correct roles (including local admin on the Exchange Server, IIRC) and trying again. A de-install seems somewhat OTT
              Tom Jones
              MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
              PhD, MSc, FIAP, MIITT
              IT Trainer / Consultant
              Ossian Ltd
              Scotland

              ** Remember to give credit where credit is due and leave reputation points where appropriate **

              Comment

              Working...
              X